Privacy policy

BonPlaya (the operator of bonplaya.com) is the controller for personal data processed through this website. For privacy questions use info@bonplaya.com or the contact page on this site.

The plugin runs on the WordPress site of the person who installs it, not in the browsers of that site's visitors. Visitors of that WordPress site do not send data to BonPlaya from their browser.

The WordPress server may send read-only HTTP GET requests to https://bonplaya.com/sitemap.xml (and nested sitemap files) to match public beach URLs for optional review links.

This happens after a successful beach sync, when the local sitemap cache is older than the configured TTL. Not on every page view. Not from the visitor's browser.

Those requests do not include names, e-mail addresses or cookies of visitors of that WordPress site. They do include a User-Agent "BonPlayaNearbyBeaches/0.1" plus the home_url of that WordPress installation (identifies the site, not an end user).

The plugin can optionally show visible HTML links to bonplaya.com (integration full, subtle or none). That is not an API call from the visitor. If the site admin sets integration to none, there are no BonPlaya.com links.

The plugin does not set tracking, analytics or advertising cookies on behalf of BonPlaya.

When you browse this website, our hosting and application logs typically store the IP address, User-Agent, requested URL and time. That is normal for a public site. We use it for security, abuse prevention and debugging, not for advertising.

If you register or sign in we store your e-mail address and optional name, plus a login cookie. If you sign in with Google we receive your e-mail (and a display name if Google provides one) to create or link your account.

Reviews and photos you publish are stored and shown publicly as part of the guide. You can ask us to delete them.

Messages you send through the contact form (and the e-mail address you give there) are stored so we can reply.

If you use the optional Translate control on a review, our server sends that public review text to a third-party translation service and shows the result. We do not host that service's terms on this site.

We use functional cookies only: the login session cookie and a language-preference cookie so the site stays in the language of the URL. We do not use advertising cookies, and we do not run a third-party analytics or ads product on this site.

Account data, reviews and photos stay until you delete your content or ask us to remove it, or until we must keep it for security or legal reasons. Server logs are kept only as long as needed for operations and security. Application error records (path and exception details, not a marketing profile) are kept for debugging.

We do not sell personal data.

We do not share personal data with third parties for advertising.

We do not send newsletters without consent, and we do not use tracking ads.

We may update this policy. The current text is always on this page.